UK CONFIDENTIAL Version 6. dated 1 1/08 

Side 1 

The sasue on GCWeb is tfis defiftnifetfs version; p rinted copies may be out of date. Terms are defined in the glossary at 

leg aTle q/cnmpliancerq ossary shteYi . 



Legal Authorisation Flowchart: TARGETING 
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Some domains/IPs/VPNs are 
for specific organisations r 
others are available to a range 
of users. Make a judgement 



Filtering without targeting needs no 
additional authorisation. For tasking 
consult the collection flowchart 
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Is the target named on a 16(3) 
authorisation? 



YES 



Do you believe the target is in 
the UK? (see footnotes 1,2) 



NO/ 

Don't 



YES 



Is the target specified on a RIIPA 
8(1 ) warrant and his comms 
address on the schedule? 



YES 



Appropriate legal authorisation 
is in place. Go ahead 



Are you targeting the comms of a 
particular company, organisation or 
individual? 
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PTO 



NO 



Footnotes 

(1) Without authorisation you must not Indirectly target the 
communications of someone in the UK by using a foreign selector. 

(2) In the absence of any other information, you should assume the 
user of a .uk. email address is in the UK 

(3) In the absence off any other information, you may assume the 
user of a com or other nan-geographic address is not in the US. 
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Legal Authorisation Flowchart: TARGETING 
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The issue on GC'vV'eb is th e definitive version ; printed copies may be out of date. Terms are defined in the glossary at 
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Legal Authorisation Flowchart: COLLECTION 
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Will you be intercepting comms 
content? 



YES 



NO 



Is one end US? 
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Is the collection at least 
one end foreign? 



YES 



all intercept pass 
through a TND or 
dictionary? 



NO 



YES 



No further authorisation is 
required 



You can survey for up to 2 hours’ 
worth of data but may not return to 
the same bearer until you believe 
its composition has changed 



You can assume appropriate legal 
authorisation is in place 



Unlikely to be proper 
GCHO business: 
consult OPP-LEG 



NO 

ie this is full or coarse 
unselected take 



Some domains/VPNs are 
for specific organisations, 
others are available to a 
range of users. If you are 
in effect targeting a 
specific organisation, see 
the Targeting flowchart 
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Trie issue on GGWeb is the definitive version; printed copies may be out of date. Terms are defined in the glossary at 

fooe rati d n&'coi i cvvlec alitiesfeuithorisati on/defiii Sons. shtm I. 



Legal Authorisation Flowchart: COLLECTION 



This is SD/survey so you should 
co ns idler proportional ity 
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Is one end US/CAN/AUS/NZ? 



YES 




Assume appropriate authorisation 
is in place. Go ahead 



Nominated Grade 6 8TA is required. If 
the link is one end US you can survey for 
up to 2 hours' worth of data, but may not 
return to the same hearer until you 
believe its composition has changed 





